1980085 - Remove Website and Email Trust Bit from “Security Communication RootCA2”

Status: UNCONFIRMED

(CA Program :: CA Certificate Root Program, task)

Comment 1

[SECOM Trust Systems - ONO Fumiaki]

Root Transition Plan

Remove TLS and Email Trust Bit from “Security Communication RootCA2”

CA Operator Name

SECOM Trust Systems Co., Ltd.

Root CA Certificate

C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2

SHA-256 Fingerprint:
513B2CECB810D4CDE5DD85391ADFC6C2DD60D87BB736D2B521484AA47A0EBEF6

Summary Description of the Plan:
SECOM Trust Systems issues TLS server certificates and S/MIME certificates through subordinate CAs under this Root CA.

Field	Date
Not Before (Root CA)	2009-05-29
Not After (Root CA)	2029-05-29

Request to remove the websites trust bit

• Removal of Websites Trust Bit: 2027-04-15 (remove the websites trust bit)
• Reference：https://wiki.mozilla.org/CA/Root_CA_Lifecycles

Request to remove the root

Distrust for S/MIME After Date: 2028-12-31

• Migration deadline stated in "7.5.3 Transition Plan for Existing Roots"

Other (Explain)

Transition Timeline

Please provide relevant dates and milestones. Example entries might include:

Date to submit change request: [2025-07-30]

Last issuance of conflicting certificates:

• TLS server certificates [2026-09-27]
• S/MIME certificates [2026-09-28]

Expiration date of last affected certificate:

• TLS server certificates [2027-04-15]
• S/MIME certificates [2028-12-31]

Planned date of removal: [2028-12-31]

Estimated date for inclusion of new single-purpose root(s) (if applicable):

• SECOM TLS RSA Root CA 2024

  • Expected full inclusion:
    • 2026-09-27 (This is 200 days prior to 2027-04-15, the TLS distrust date)
  • Add SECOM TLS RSA Root CA 2024 and SECOM TLS ECC Root CA 2024

• SECOM SMIME RSA Root CA 2024

  • Expected full inclusion:
    • 2026-09-28 (This is 825 days prior to 2028-12-31, the S/MIME distrust date)
  • Add SECOM SMIME RSA Root CA 2024

Best regards,

ONO Fumiaki / 大野 文彰
SECOM Trust Systems CO., LTD.